Security Advisory
CVE-2015-5887
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The TLS Handshake Protocol implementation in Secure Transport in Apple OS X before 10.11 accepts a Certificate Request message within a session in which no Server Key Exchange message has been sent, which allows remote attackers to have an unspecified impact via crafted TLS data.